<html>
<head><meta charset="utf-8"><title>signing stuff · t-release · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/index.html">t-release</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html">signing stuff</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="204222518"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222518" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222518">(Jul 17 2020 at 15:47)</a>:</h4>
<p>so <span class="user-mention" data-user-id="219696">@XAMPPRocky</span>, the signing stuff was prompted by me wanting to do some refactorings to the release process</p>



<a name="204222663"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222663" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222663">(Jul 17 2020 at 15:48)</a>:</h4>
<p>namely:</p>
<ul>
<li>moving it away from RCS into ephemeral VMs</li>
<li>moving the signing to a place where we can get a audit trail</li>
<li>while I'm working on it, implement windows codesigning</li>
</ul>



<a name="204222796"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222796" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222796">(Jul 17 2020 at 15:49)</a>:</h4>
<p>I don't think I'm going to work on macOS notarization right away: it's a huge pain like everything apple-related (as you can only do it on macOS), and it doesn't benefit us much for now</p>



<a name="204222875"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222875" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> XAMPPRocky <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222875">(Jul 17 2020 at 15:50)</a>:</h4>
<p>I remember we discussed using Mozilla’s signing thing but i don’t remember what it’s called or what if any kind of decision was made.</p>



<a name="204222876"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222876" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222876">(Jul 17 2020 at 15:50)</a>:</h4>
<p>the recommended way to install and use rust from macOS is to <code>curl | bash</code> rustup, and that doesn't involve notarization checks</p>



<a name="204222917"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222917" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> XAMPPRocky <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222917">(Jul 17 2020 at 15:50)</a>:</h4>
<p>I might have news on that soon <span aria-label="slight smile" class="emoji emoji-1f642" role="img" title="slight smile">:slight_smile:</span></p>



<a name="204222933"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222933" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222933">(Jul 17 2020 at 15:50)</a>:</h4>
<p>oh?</p>



<a name="204222973"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222973" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222973">(Jul 17 2020 at 15:50)</a>:</h4>
<p>(feel free to PM me if you can't discuss it publicly, I'd be <em>eager</em> to know that)</p>



<a name="204222976"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204222976" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> XAMPPRocky <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204222976">(Jul 17 2020 at 15:50)</a>:</h4>
<p>Or not news, an announcement</p>



<a name="204223030"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/241545-t-release/topic/signing%20stuff/near/204223030" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Pietro Albini <a href="https://rust-lang.github.io/zulip_archive/stream/241545-t-release/topic/signing.20stuff.html#204223030">(Jul 17 2020 at 15:51)</a>:</h4>
<p>while on windows it's actually a problem since rustup is downloaded from browsers, triggering a smartscreen warning</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>